lazarusholic

Everyday is lazarus.dayβ

ReversingLabs

@ReversingLabs, https://reversinglabs.com

Reports

2026-04-29
ReversingLabs
Claude adds PromptMink malicious dependency to crypto agent
#FamousChollima #PromptMink
2026-04-09
ReversingLabs
Graphalgo fake recruiter-test campaign respawned
#Graphalgo
2026-02-11
ReversingLabs
Fake recruiter campaign targets crypto developers with RAT
#Graphalgo #Lazarus #NPM
2025-07-03
ReversingLabs
3CX’s Software Supply Chain Compromise: Lessons Learned
#3CXDesktopApp #Lazarus
2024-09-10
ReversingLabs
Fake recruiter coding tests target devs with malicious Python packages
#Lazarus #PyPI #VMConnect
2023-10-26
ReversingLabs
3cx: lessons learned
#3CXDesktopApp #Youtube
2023-08-31
ReversingLabs
VMConnect supply chain attack continues, evidence points to North Korea
#LabyrinthChollima #VMConnect #PyPI
2023-08-03
ReversingLabs
VMConnect: Malicious PyPI packages imitate popular open source modules
#VMConnect #PyPI
2023-07-27
ReversingLabs
More malicious npm packages found in wake of JumpCloud supply chain hack
#JumpCloud #NPM
2023-07-06
ReversingLabs
Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks
#Brainleeches #NPM
2023-03-30
ReversingLabs
Red flags flew over software supply chain-compromised 3CX update
#SupplyChain #3CXDesktopApp #SmoothOperator
2020-11-16
ReversingLabs
PoorWeb - Hitching a Ride on Hangul
2020-06-23
ReversingLabs
Hidden Cobra - from a shed skin to the viper’s nest
#HiddenCobra